CluPilotCloud

Author	SHA1	Message	Date
nexxo	a6a41719bb	fix(engine): long SSH command timeout; wg peer removal on privileged worker - PhpseclibRemoteShell sets a command timeout (default 2000s) so apt full-upgrade/install don't hit phpseclib's ~10s default and fail. - Host removal dispatches RemoveWireguardPeer to the provisioning queue, which runs in the worker that owns wg0 (the web container can't manage WireGuard). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 11:01:02 +02:00
nexxo	00b8897b9d	fix(engine): compute default WireGuard hub IP from the CIDR network Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 10:49:43 +02:00
nexxo	18d1ed2424	fix(engine): derive WireGuard hub IP from the configured subnet hub_ip is now defined in config (default: subnet .1), so a custom CLUPILOT_WG_SUBNET no longer pings the wrong handshake target. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 10:38:17 +02:00
nexxo	4f724d57c9	feat(engine): orchestrator core (state machine + tick + lock) StepResult, ProvisioningStep contract, PipelineRegistry, RunRunner (per-run lock, advance/retry/fail, backoff, timeout, append-only events + Reverb StepAdvanced), AdvanceRunJob (provisioning queue), minutely Tick, admin.runs channel. 21 tests. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 09:54:52 +02:00